Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer (raw, json)
Hash identifier: Lk5LTZ1CTJ4GxrfJMSyASmy+WeAqNaQtmuTP0laX6FM=
Subject key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3489D0E5E8F9016B1618634C16B6D2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 16169
AS: 50500
IP: 185.114.88.0/22
IP: 185.134.176.0/22
IP: 2a06:eb80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9d:0e:5e:8f:90:16:b1:61:86:34:c1:6b:6d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=215a409d27b9a69346324004694da11beae02dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:b9:a5:26:bb:2e:20:2e:86:c3:0f:ff:14:
db:5e:94:d7:ce:c2:b1:f0:a6:6a:38:7a:27:3e:cb:
f3:82:e4:72:a5:37:fa:c3:09:a7:d8:ad:ce:9c:57:
68:16:74:bc:6c:ca:67:04:eb:f3:f1:50:46:ce:9a:
31:cb:fe:41:80:0c:58:87:ae:fa:95:31:ba:9f:44:
3f:35:6c:6c:60:94:ac:8e:4a:77:6d:1b:10:18:e8:
8c:13:86:21:3e:94:62:11:9a:fe:69:5e:da:8f:84:
e8:8d:22:d1:64:e9:a9:63:52:47:68:6e:57:bf:7f:
eb:16:90:5a:8b:81:34:9b:a6:35:6d:ee:a9:46:00:
40:7f:4d:ec:43:78:01:95:1a:87:51:1a:a1:e4:51:
b9:e3:18:5f:8a:65:dc:17:d1:ff:0e:2b:a6:c8:17:
05:e2:29:37:b7:6f:29:41:e6:6c:45:61:6f:56:07:
e4:d5:73:45:2b:dd:5f:01:6c:fd:3c:40:b4:24:70:
61:35:82:f6:c4:16:e9:bd:78:8b:01:0b:9f:93:80:
64:37:08:31:2c:61:e4:fa:f5:f1:cb:b6:10:66:81:
14:ee:37:1b:2a:15:cf:95:af:a6:8a:24:32:e3:ec:
d3:fa:2d:09:e3:e9:3e:53:3e:d4:04:ad:33:13:23:
d5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.88.0/22
185.134.176.0/22
IPv6:
2a06:eb80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16169
50500
Signature Algorithm: sha256WithRSAEncryption
13:03:5d:25:57:1a:8d:19:be:a2:cc:76:a4:2b:56:0b:cc:f1:
ee:ba:f2:fe:9a:2c:61:11:bf:ad:aa:24:bf:6b:9e:ee:46:3b:
be:9d:71:f0:96:67:ad:ab:cb:49:97:e7:85:d5:d0:e7:15:38:
ff:49:08:92:c5:e7:ca:28:f2:4e:a3:85:6b:5e:02:f6:42:cc:
15:1d:cb:91:a5:74:bb:7d:81:dc:c9:ea:b6:78:14:cd:88:68:
71:43:00:7d:ef:9e:41:6e:3f:ee:ce:ab:ad:47:0b:4b:0b:77:
94:b7:bf:c0:2a:94:88:f3:d7:24:6b:84:2d:5c:d0:ae:61:db:
ce:db:cd:96:b0:d3:e7:03:90:f9:7f:2c:77:4c:2d:0c:a5:ed:
04:db:5f:e3:66:bb:12:ef:d2:b0:0a:01:22:77:5e:64:b4:23:
0a:24:7b:af:77:de:da:b5:ec:d2:98:50:6c:9b:62:3f:84:e2:
98:ef:94:1f:92:8b:af:9a:08:39:7c:2c:47:01:19:99:73:59:
2e:ae:b1:0e:ad:82:8a:16:a0:c2:4d:c2:c2:7f:77:6d:e5:e2:
c0:c7:ac:3a:04:30:a9:67:49:47:27:78:4b:46:01:c4:07:bd:
2a:a9:2e:41:fe:81:f8:90:e6:d8:1a:81:e3:14:6f:4f:e2:37:
76:06:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:23:14 2024 by rpki-client on console-fra.rpki-client.org